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Apple is very seriously committed to protecting your data and we work hard to deliver 
the most secure hardware, software and services available. We believe our customers 
have a right to understand how their personal data is managed and protected. This 
report provides information regarding requests Apple received from government 
agencies worldwide and U.S. private parties from January 1 through June 30, 2020. 


Apple receives various forms of legal requests seeking information from or actions by 
Apple. We receive requests from governments globally where we operate and from 
private parties. 


Government request circumstances can vary from instances where law enforcement 
agencies are working on behalf of customers who have requested assistance regarding 
lost or stolen devices, to instances where law enforcement are working on behalf of 
customers who suspect their credit card has been used fraudulently to purchase Apple 
products or services, to instances where an account is suspected to have been used 
unlawfully. Requests can also seek to preserve an Apple account, restrict access to an 
Apple account or delete an Apple account. Additionally, requests can relate to 
emergency situations where there is imminent harm to the safety of any person. 


Private party request circumstances generally relate to instances where private litigants 
are involved in either civil or criminal proceedings. 


Types of legal requests Apple receives from the United States can be: subpoenas, court 
orders, search warrants, pen register/trap and trace orders, or wiretap orders. 


Types of legal requests Apple receives internationally can be: Production Orders 
(Australia, Canada, New Zealand), Requisition or Judicial Rogatory Letters (France), 
Solicitud Datos (Spain), Ordem Judicial (Brazil), Auskunftsersuchen (Germany), 
Obligation de dépét (Switzerland), (A ts#RO RAK #A (Japan), Personal Data Request 
(United Kingdom), as well as equivalent court orders and/or requests from other 
countries. 


The restrictions imposed by the sanctions laws generally prohibit Apple from responding 
to requests from countries, territories or governments sanctioned by the U.S. 
Department of Treasury, with the exception of requests involving exempt informational 
material or where prior authorization has been secured. 


The type of customer data sought in requests varies depending on the case under 
investigation. For example, in stolen device cases, law enforcement generally seek 
details of customers associated with devices or device connections to Apple services. In 
credit card fraud cases, law enforcement generally seek details of suspected fraudulent 
transactions. Depending on what the legal request asks, Apple will provide subscriber or 
transaction details in response to valid legal requests received. 


In instances where an Apple account is suspected of being used unlawfully, law 
enforcement may seek details of the customer associated with the account, account 
connections or transaction details or account content. Any U.S. government agency 
seeking customer content data from Apple must obtain a search warrant issued upon a 
showing of probable cause. International requests for content must comply with 
applicable laws, including the U.S. Electronic Communications Privacy Act (ECPA). A 
request under a Mutual Legal Assistance Treaty or Agreement with the U.S. is in 
compliance with ECPA. 


The type of customer data sought in emergency situations generally relates to details of 
customers’ connection to Apple services. We have a dedicated team available around 
the clock to respond to emergency requests. Apple processes emergency requests from 
law enforcement globally on a 24/7 basis. An emergency request must relate to 
circumstances involving imminent danger of death or serious physical injury to any 
person. If Apple believes in good faith that it is a valid emergency, we may voluntarily 
provide information to law enforcement on an emergency basis. 


How we manage and 
respond to requests 


How we count requests 
and responses 


How we report requests 
and responses 


Customer notification 


Apple has a centralized and standardized process for receiving, tracking, processing, 
and responding to legal requests from law enforcement, government, and private parties 
worldwide, from when a request is received until when a response is provided. 


Government and private entities are required to follow applicable laws and statutes when 
requesting customer information and data. We contractually require our service 
providers to abide by the same standard for any government information requests for 
Apple data. Our legal team reviews requests received to ensure that the requests have a 
valid legal basis. If they do, we comply with the requests and provide data responsive to 
the request. If we determine a request does not have a valid legal basis, or if we consider 
it to be unclear, inappropriate and/or over-broad, we challenge or reject it. 


Apple counts requests received from government agencies worldwide and United States 
private parties within the reporting period in which they are received. Overall numbers of 
requests and responses are reported. 


A request with a valid legal basis is processed and responded to, and is counted as one 
request. A request that is challenged/rejected is counted as one request. Where new 
legal process is submitted to amend the request, it is counted as a new request. We 
count each request we challenge or reject for account-based, account restriction/ 
deletion, emergency and private party requests; and report these numbers accordingly. 


We count the number of discernible devices, financial identifiers, and/or accounts 
specified in requests, and report these accordingly by type. If there are two identifiers for 
one device in a request, for example a serial number and IMEI number, we count this as 
one device. If there are multiple identifiers for one account in a request, for example 
Apple ID, full name and phone number, we count this as one account. 


For United States Government Requests by Legal Process Type reporting, where two 
types of legal process are combined in a single request, such as a search warrant with 
an incorporated court order, we record the request at the highest level of legal process 
and the request would be reported as a search warrant. An exception is where a pen 
register/trap and trace order is received; this is counted as a pen register/trap and trace 
order, notwithstanding that it may include a search warrant. 


We report on requests and responses in the following categories: 


1) Worldwide Government Device Requests 
) Worldwide Government Financial Identifier Requests 
3) Worldwide Government Account Requests 
4) Worldwide Government Account Preservation Requests 
) Worldwide Government Account Restriction/Deletion Requests 
6) Worldwide Government Emergency Requests 
7) United States Government National Security Requests 
8) United States Government Device Requests by Legal Process Type 
9) United States Government Financial Identifier Requests by Legal Process Type 
10) United States Government Account Requests by Legal Process Type 
11) United States Private Party Requests for Information 
12) United States Private Party Requests for Account Restriction/Deletion 
13) Worldwide Government App Store Takedown Requests - Legal Violations 
14) Worldwide Government App Store Takedown Requests - Platform Policy Violations 


For government agency requests for customer information and data, we report the 
numbers of requests we receive and our responses in various categories. For United 
States National Security requests for customer information and data, we report as much 
detail as we are legally allowed. In order to report FISA non-content and content 
requests in separate categories, Apple is required by law to delay reporting by 6 months 
and report the numbers in ranges of 500, pursuant to the USA FREEDOM Act of 2015. 


When we receive an account request seeking our customers’ information and data, we 
notify the customer that we have received a request concerning their personal data 
except where we are explicitly prohibited by the legal process, by a court order Apple 
receives, or by applicable law. We reserve the right to make exceptions, such as 
instances where we believe providing notice creates a risk of injury or death to an 
identifiable individual, or where the case relates to child endangerment, or where notice 
is not applicable to the underlying facts of the case. 


Table 1: Worldwide Government Device Requests 
January 1 - June 30, 2020 


Table 1 provides information regarding device-based requests received. Examples of such requests are where law enforcement 
agencies are working on behalf of customers who have requested assistance regarding lost or stolen devices. Additionally, Apple 
regularly receives multi-device requests related to fraud investigations. Device-based requests generally seek details of 
customers associated with devices or device connections to Apple services. 


Country or Region’ 


Australia 
China mainland 
Hong Kong 
Japan 
Macau 
Malaysia 
New Zealand 
Singapore 
South Korea 
Taiwan 
Thailand 


Andorra 
Austria 
Belarus 
Belgium 
Czech Republic 
Denmark 
Estonia 
Finland 
France 
Germany 
Greece 
Hungary 
India 

Ireland 

Israel 

Italy 
Liechtenstein 
Lithuania 
Luxembourg 
Malta 
Moldova 
Netherlands 
North Macedonia 
Norway 
Poland 
Portugal 
Romania 
Russia 
Slovenia 
South Africa 
Spain 
Sweden 
Switzerland 
Turkey 
United Kingdom 


Argentina 
Brazil 
Chile 
Ecuador 


Canada 
Mexico 
United States of America 


1Only countries / regions where Apple received device requests during report period January 1 - June 30, 2020, are listed. 
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# of Device Requests Received 


# of Devices Specified in the 
Requests 


2,398 
13,243 
84 
4,899 


# of Device Requests Where 
Data Provided 


1,315 


% of Device Requests Where 
Data Provided 


48% 
94% 
19% 
88% 
67% 
100% 
32% 
86% 
79% 
59% 
20% 
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# of Device 
Requests Received 


# of Devices 
Specified in the 
Requests 


# of Device 
Requests Where 
Data Provided 


% of Device 
Requests Where 
Data Provided 


The number of device-based requests received from a government agency seeking customer 
data related to specific device identifiers, such as serial number or IMEI number. Requests can be 
in various formats such as subpoenas, court orders, warrants, or other valid legal requests. We 
count each individual request received from each country/region and report the total number of 
requests received by country/region. 


The number of devices specified in the requests. One request may contain one or multiple device 
identifiers. For example, in a case related to the theft of a shipment of devices, law enforcement 
may seek information related to several device identifiers in a single request. We count the 
number of devices identified in each request, received from each country/region, and report the 
total number of devices specified in requests received by country/region. 


The number of device-based requests that resulted in Apple providing data, such as customers 
associated with devices, device connections to Apple services, purchase, customer service, or 
repair information, in response to a valid legal request. We count each device-based request 
where we provide data and report the total number of such instances by country/region. 


The percentage of device-based requests that resulted in Apple providing data. We calculate this 
based on the number of device-based requests that resulted in Apple providing data per country/ 
region, compared to the total number of device-based requests Apple received from that country/ 
region. 


Table 2: Worldwide Government Financial Identifier Requests 
January 1 - June 30, 2020 


Table 2 provides information regarding financial identifier-based requests received. Examples of such requests are where law 
enforcement agencies are working on behalf of customers who have requested assistance regarding suspected fraudulent credit 
card activity used to purchase Apple products or services. Financial identifier-based requests generally seek details of suspected 


fraudulent transactions. 


Country or Region’ 


Australia 

China mainland 
Hong Kong 
Japan 

Macau 
Malaysia 

New Zealand 
Singapore 
South Korea 
Taiwan 


Austria 
Belgium 

Czech Republic 
Denmark 
Estonia 

Finland 

France 
Germany 
Greece 
Hungary 

India 

Ireland 

Italy 
Kazakhstan 
Lithuania 
Luxembourg 
Moldova 
Monaco 
Netherlands 
Norway 

Poland 
Portugal 
Romania 
Russia 

Spain 

Sweden 
Switzerland 
Turkey 

United Arab Emirates 
United Kingdom 


Brazil 
Costa Rica 
Dominican Republic 


Canada 
Mexico 
United States of America 


# of Financial Identifier 
Requests Received 


621 


# of Financial Identifiers 
Specified in the Requests 


289 


# of Financial Identifier 
Requests Where Data Provided 


238 


13 
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18 


450 


% of Financial Identifier 
Requests Where Data Provided 


43% 
56% 
31% 
81% 
82% 
100% 
75% 
72% 
75% 
93% 


1Only countries / regions where Apple received financial identifier requests during report period January 1 - June 30, 2020, are listed. 
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# of Financial Identifier 
Requests Received 


# of Financial 
Identifiers Specified in 
the Requests 


# of Financial Identifier 
Requests Where 
Data Provided 


% of Financial Identifier 
Requests Where 
Data Provided 


The number of financial identifier-based requests received from a government agency 
seeking customer data related to specific financial identifiers, such as credit card or gift card 
number. Financial identifier-based requests can be in various formats such as subpoenas, 
court orders, warrants, or other valid legal requests. We count each individual request 
received from each country/region and report the total number of requests received by 
country/region. 


The number of financial identifiers specified in the requests. One request may contain one or 
multiple financial identifiers. For example, in a case related to large scale fraud, law 
enforcement may seek information related to several credit card numbers in a single request. 
We count the number of financial identifiers identified in each request, received from each 
country/region, and report the total number of financial identifiers specified in requests 
received by country/region. 


The number of financial identifier-based requests that resulted in Apple providing data, such 
as transaction details, in response to a valid legal request. We count each financial identifier- 
based request where we provide data and report the total number of such instances by 
country/region. 


The percentage of financial identifier-based requests that resulted in Apple providing data. 
We calculate this based on the number of financial identifier-based requests that resulted in 
Apple providing data per country/region, compared to the total number of financial identifier- 
based requests Apple received from that country/region. 


Table 3: Worldwide Government Account Requests 


January 1 - June 30, 2020 


S 


Table 3 provides information regarding account-based requests received. Examples of such requests are where law enforcement 
agencies are working on cases where they suspect an account may have been used unlawfully or in violation of Apple's terms of 
service. Account-based requests generally seek details of customers’ iTunes or iCloud accounts, such as a name and address; 
and in certain instances customers’ iCloud content, such as stored photos, email, iOS device backups, contacts or calendars. 


Country or Region’ 


# of Account 


# of Accounts 


# of Account Requests 


# of Account Requests 


# of Account Requests 


% of Account 


Requests Specified in Challenged in Part or Where Only Non-Content Where Content Data Requests Where 

Received the Requests Rejected in Full Data Provided Provided Data Provided 
Australia WA 237 31 123 (0) 69% 
China mainland 73 145 2 59 3 85% 
Hong Kong 8 13 4 4 0 50% 
Japan 487 723 41 397 e) 82% 
New Zealand 10 29 4 6 0 60% 
Singapore 29 35 5 19 0 66% 
South Korea 28 31 5 22 (0) 79% 
Taiwan 382 805 33 323 ¢) 85% 
Thailand 2 2 (e) (0) (0) 0% 


Andorra 
Austria 
Belgium 
Czech Republic 
Denmark 
Estonia 
Finland 
France 
Germany 
Greece 
Hungary 
India 

Ireland 

Israel 

Italy 
Liechtenstein 
Lithuania 
Luxembourg 
Malta 
Monaco 
Netherlands 
North Macedonia 
Norway 
Poland 
Portugal 
Romania 
Russia 

Spain 
Sweden 
Switzerland 
Turkey 

United Kingdom 


Brazil 
Chile 
Costa Rica 
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801 


Canada 
Mexico 
United States of America 


1Only countries / regions where Apple received account requests during report period January 1 - June 30, 2020, are listed. 
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N 


# of Account 
Requests Received 


# of Accounts 
Specified in the 
Requests 


# of Account 
Requests 
Challenged in Part 
or Rejected in Full 


# of Account 
Requests Where 
Only Non-Content 
Data Provided 


# of Account 
Requests Where 
Content Data 
Provided 


% of Account 
Requests Where 
Data Provided 


The number of account-based requests received from a government agency seeking customer 
data related to specific Apple account identifiers, such as Apple ID or email address. Account- 
based requests can be in various formats such as subpoenas, court orders, warrants, or other 
valid legal requests. We count each individual request received from each country/region and 
report the total number of requests received by country/region. 


The number of accounts specified in the requests. One request may contain one or multiple 
account identifiers. For example, in a case related to suspected phishing, law enforcement may 
seek information related to several accounts in a single request. We count the number of 
accounts identified in each request, received from each country/region, and report the total 
number of accounts specified in requests received by country/region. 


The number of account-based requests that resulted in Apple challenging the request in part, or 
rejecting the request in full, based on grounds such as a request does not have a valid legal basis, 
or is unclear, inappropriate, and/or over-broad. For example, Apple may reject a law enforcement 
request if it considers the scope of data requested as excessively broad for the case in question. 
We count each account-based request where we challenge it in part, or reject it in full, and report 
the total number of such instances by country/region. 


The number of account-based requests that resulted in Apple only providing non-content data, 
such as subscriber, account connections or transactional information, in response to a valid legal 
request. We count each account-based request where we provide only non-content data and 
report the total number of such instances by country/region. 


The number of account-based requests that resulted in Apple providing content data, such as 
stored photos, email, iOS device backups, contacts or calendars, in response to a valid legal 
request. We count each account-based request where we provide content data and report the 
total number of such instances by country/region. 


The percentage of account-based requests that resulted in Apple providing either non-content 
and/or content data. We calculate this based on the number of account-based requests that 
resulted in Apple providing data (including both non-content and content) per country/region, 
compared to the total number of account-based requests Apple received from that country/ 
region. 


Table 4: Worldwide Government Account Preservation Requests 
January 1 - June 30, 2020 


Table 4 provides information regarding account preservation requests received. Under the U.S. Electronic Communications 
Privacy Act (ECPA) government agencies may request Apple to preserve users’ account data by performing a one-time data pull 
of the requested existing user data available at the time of the request for 90 days (up to 180 days if Apple receives a renewal 
request). Examples of such requests are where law enforcement agencies suspect an account may have been used unlawfully or 
in violation of Apple's terms of service, and request Apple to preserve the account data while they obtain legal process for the 


data. 


Country or Region’ 


# of Accounts Where Data 
Preserved 


# of Accounts Specified in the 


# of Account Preservation Requests 
Requests 


Received 


Australia 11 24 19 
New Zealand 2 2 2 
Singapore 1l 1 
Asia Pacific Total 14 27, 22 

Europe, Middle East India, Affe 
Belgium 3 | 6 5 
Finland 15 | 12 
France 2 2 2 
Germany 12 32 | 18 
India 2 23 18 
Ireland 4 ee || 8 
Luxembourg 2 5 13) 
Netherlands 5 1 4 
Norway 1 1 1 
Poland 1 | 1 
Spain 1 1 1 
Sweden 6 7 7 
Switzerland 1 2 2 
Ukraine 2 2 || 2 
United Kingdom 42 74 57 
Europe, Middle East, India, Africa Total | 89 194 143 

Sat Amer 
Argentina S 3 | S 
Brazil 127 578 369 
Chile 1 3 | 1 
Latin America Total 131 584 373 

| Net Ame 
Canada 22 31 26 
United States of America 3,495 9164 | 6,295 
North America Total 3,517 9,195 6,321 


1Only countries / regions where Apple received account preservation requests during report period January 1 - June 30, 2020, are listed. 


# of Account 
Preservation 
Requests Received 


# of Accounts 
Specified in the 
Requests 


# of Accounts 
Where Data 
Preserved 


The number of account preservation requests received from a government agency. We count 
each individual request received from each country/region and report the total number of 
requests received by country/region. 


The number of accounts specified in the requests. One request may contain one or multiple 
account identifiers. For example, in a case related to suspected illegal activity, law enforcement 
may request Apple to preserve information related to several accounts in a single request. We 
count the number of accounts identified in each request, received from each country/region, and 
report the total number of accounts specified in requests received by country/region. 


The number of accounts that resulted in Apple preserving data in response to a valid preservation 
request. We count the number of accounts in each request where data was preserved and report 
the total number of accounts for which data was preserved by country/region. 


Table 5: Worldwide Government Account Restriction/Deletion Requests 
January 1 - June 30, 2020 


Table 5 provides information regarding account restriction/deletion requests received. Examples of such requests are where law 
enforcement agencies suspect an account may have been used unlawfully or in violation of Apple's terms of service, and request 
Apple to restrict or delete the account. For requests seeking to restrict/delete a customer's Apple ID, Apple requires a court order 
(including conviction or warrant) demonstrating that the account to be restricted/deleted was used unlawfully, except in situations 
where the case has been verified by Apple to relate to child endangerment. 


Country or Region! # of Account Restriction/ 
Account Deletion 


Requests Received 


# of Requests Where 


in the Requests Challenged Where No Account Restricted Account Deleted 


# of Accounts Specified | # of Requests Rejected/ | 
Action Taken | 


# of Requests Where | 


Australia i i ll ie} 0 
Asia Pacific Total 1 1 1 0 (0) 
Austria? 1 1 0 | ) 0 
Germany 1 il i 0 0 
Sweden 1) 1 1) 0 ) 
Switzerland i i i 0 0 
Europe, Middle East, 

India, Africa Total 4 O 3 0 0 
Canada? 2 2 ie) 1 0 
Mexico 1 il 1 0 0 
United States of America | 10 | 17 | 0 | 10 | 0 
North America Total Ae) 20 ‘il 11 (0) 


1Only countries / regions where Apple received account restriction/deletion requests during report period January 1 - June 30, 2020, are listed. 
2 Request received where Apple had no results for the account identified in the request. 


The number of requests received from a government agency seeking to restrict or delete a 
customer's Apple account. We count each individual request received from each country/region 
and report the total number of requests received by country/region. 


# of Account 
Restriction/Account 
Deletion Requests 


Received 
# of Accounts The number of accounts specified in the requests. One request may contain one or multiple 
Specified in the account identifiers. For example, in a case related to possession or distribution of illegal material, 
Requests law enforcement may request Apple to restrict or delete several accounts in a single request. We 


count the number of accounts identified in each request, received from each country/region, and 
report the total number of accounts specified in requests received by country/region. 


# of Requests The number of account restriction/deletion requests that resulted in Apple challenging or 


Rejected/ rejecting the request based on grounds such as a request does not have a valid legal basis, or is 
unclear, inappropriate, and/or over-broad, or where it is not accompanied by a court order 
sate nlaes (including conviction or warrant) demonstrating that the account to be restricted/deleted was 
o Action laken 


used unlawfully; and where no action was taken by Apple. We count each account restriction/ 
deletion request where we challenge or reject it and report the total number of such instances by 
country/region. 


# of Requests 
Where Account 
Restricted 


# of Requests 
Where Account 
Deleted 


The number of requests where Apple determined the request and order sufficiently demonstrated 
the account to be restricted was used unlawfully and we proceeded with restriction. We count 
each request where we proceeded with account restriction and report the total number of such 
instances by country/region. 


The number of requests where Apple determined the request and order sufficiently demonstrated 
the account to be deleted was used unlawfully and we deleted the Apple account. We count each 
request where we deleted an account and report the total number of such instances by country/ 
region. 
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Table 6: Worldwide Government Emergency Requests 
January 1 - June 30, 2020 


Table 6 provides information regarding emergency requests received. Under the U.S. Electronic Communications Privacy Act 
(ECPA) government agencies may request Apple to voluntarily disclose information, including customer information and 
contents of communications, to a government entity if Apple believes in good faith that an emergency involving imminent 
danger of death or serious physical injury to any person requires such disclosure without delay. International agencies may 
make similar requests to Apple under applicable local law. Examples of such requests are where a person may be missing and 
law enforcement believes the person may be in danger. Emergency requests generally seek details of customers’ connections to 


Apple services. 


Country or Region’ 


# of Emergency 
Requests 
Received 


# of Requests Rejected/ 
Challenged & No Data 
Provided 


# of Emergency Requests 
Where No Data Provided 


# of Emergency Requests 
Where Data Provided 


% of Emergency Requests 
Where Data Provided 


Australia 
Japan 
Singapore 
Taiwan 
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73% 
100% 
100% 
100% 
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Czech Republic 
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50% 
100% 
100% 

86% 

75% 
100% 
100% 
100% 
100% 

88% 
100% 
100% 
100% 
100% 
100% 

79% 
100% 

85% 


Brazil 


Chile 


Canada 


Mexico 
United States of America 


N 


N 


100% 
100% 


100% 


1Only countries / regions where Apple received emergency requests during report period January 1 - June 30, 2020, are listed. 
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# of Emergency 
Requests Received 


# of Requests 
Rejected/Challenged 
& No Data Provided 


# of Emergency 
Requests Where 
No Data Provided 


# of Emergency 
Requests Where 
Data Provided 


% of Emergency 
Requests Where 
Data Provided 


The number of emergency requests received from a government agency. We count each 
individual request received from each country/region and report the total number of requests 
received by country/region. 


The number of emergency requests that resulted in Apple challenging or rejecting the request 
based on grounds such as a request is unclear, inappropriate, or fails to demonstrate that it 
relates to an emergency circumstance; and where no data was provided. We count each 
emergency request where we challenge or reject it and report the total number of such 
instances by country/region. 


The number of emergency requests that resulted in Apple providing no data. For example, 
instances where there was no responsive data. We count each emergency request where we do 
not provide data and report the total number of such instances by country/region. 


The number of emergency requests that resulted in Apple providing data, such as connections 
to Apple services, subscriber or transactional information, or in certain instances customers’ 
iCloud content, such as stored photos, email, iOS device backups, contacts or calendars, in 
response to a valid emergency request. We count each emergency request where we provide 
data and report the total number of such instances by country/region. 


The percentage of emergency requests that resulted in Apple providing data. We calculate this 
based on the number of emergency requests that resulted in Apple providing data per country/ 
region, compared to the total number of emergency requests Apple received from that country/ 
region. 
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Table 7: United States Government National Security Requests 
January 1 - June 30, 2020 


Table 7 provides information regarding United States national security requests that Apple received for customer data, including 
orders received under the Foreign Intelligence Surveillance Act (“FISA”) and National Security Letters (“NSLs”). To date, Apple 
has not received any orders for bulk data. 


We report national security requests received for Apple users/accounts (NSLs and orders received under FISA) within ranges 
permissible by law pursuant to the USA FREEDOM Act of 2015 (“USA Freedom”). In order to report FISA non-content and 
content requests in separate categories, Apple is required by law to delay reporting by 6 months and report in bands of 500. 
Though we want to be more specific, this is currently the range permitted under USA Freedom for reporting this level of detail 
regarding national security requests. Apple responds to National Security FISA content requests with information obtained from 
iCloud. Under the law, Apple cannot further disclose what information or data may be sought through these requests. 


National Security Request Type 


# of Requests Received # of Users/Accounts 


FISA Non-Content Requests 0-499 11,000 - 11,499 
FISA Content Requests 0-499 20,500 - 20,999 
National Security Letters 1-499 1-499 

National Security Letters where 1 


non-disclosure order lifted 


The below table identifies the National Security Letters received during this reporting period where the non-disclosure orders 
have been lifted and public disclosure is permitted. See Apple’s Transparency website for redacted PDFs of these National 


Security Letters. 


National Security Letter # 


NSL-20-508552 


National Security 
Request Type 


# of Requests 
Received 


# of 
Users/Accounts 


National Security 
Letter # 


Issue Date 


Non-Disclosure 
Order End Date 


Issue Date Non-Disclosure Order End Date 


5/14/20 2/5/21 


FISA Non-Content & Content Requests: FISA Court issued orders for non-content or content data. 
Non-content data is data such as subscriber or transactional information and connection logs. 
Content data is data such as stored photos, email, iOS device backups, contacts or calendars. 


National Security Letters: Federal Bureau of Investigation issued requests for non-content data in 
national security investigations. Non-content data is data such as subscriber data. Apple does not 
produce transactional information and connection logs in response to National Security Letters. 


The number of United States National Security requests received. We count each individual order and 
National Security Letter received for Apple users/accounts and report the total number of orders and 
National Security Letters received within bands/ranges permissible by law. Pursuant to USA Freedom, 
to report the number of non-content and content orders received, we are limited to providing this 
data in bands of 500. 


We count the number of users/accounts in each request received for which Apple has data and 
report the total number of users/accounts within bands permissible by law. Pursuant to USA 
Freedom, we are limited to providing this data in bands of 500. 


Government-issued reference number assigned when a National Security Letter is approved and 
signed by a Federal Bureau of Investigation Special Agent in Charge. 


Date the National Security Letter was approved and signed by the Special Agent in Charge. 


Date where a non-disclosure order for a specific National Security Letter is lifted and public 
disclosure of the National Security Letter is permitted. 
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Tables 8, 9,10: United States Government Requests by Legal Process Type 
January 1 - June 30, 2020 


Tables 8, 9, and 10 provide information regarding United States requests by legal process type. Legal process types can be 


Search Warrants, Wiretap Orders, Pen Register/Trap and Trace Orders, Other Court Orders, or Subpoenas. 


Table 8: United States Government Device Requests by Legal Process Type 


Table 8 provides information regarding the types of legal process Apple received as Device Requests. 


: . Pen Register/Trap Other Court 

# of Device Requests Search Warrants Wiretap Orders Apacs Onlere Grier 
4,641 646 N/A 7. 153 
% of Total (100%) 14% - ~0% 3% 


Subpoenas 


3,835 


83% 


Table 9: United States Government Financial Identifier Requests by Legal Process Type 


Table 9 provides information regarding the types of legal process Apple received as Financial Identifier Requests. 


# of Financial Identifier ; Pen Register/Trap Other Court 
Raguekia Search Warrants Wiretap Orders % irae Ordere Geders 
621 96 N/A 6) 


15% 


48 
% of Total (100%) 


- 0% 8% 


Table 10: United States Government Account Requests by Legal Process Type 


Table 10 provides information regarding the types of legal process Apple received as Account Requests. 


# of Account Requests | Search Warrants Wiretap Orders PEN REisteHitee Oller Count 


& Trace Orders Orders 
5,861 2,893 0 61 455 
% of Total (100%) 49% 0% 1% 8% 


Subpoenas 


477 


77% 


Subpoenas 


2,452 


42% 
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# of Device/ 
Financial Identifier/ 
Account Requests 


Search Warrants 


Wiretap Orders 


Pen Register/Trap & 
Trace Orders 


Other Court Orders 


Subpoenas 


% of Total 


The total number of United States government requests Apple received by request type (Device, 
Financial Identifier, and Account). We count each individual request received from the United 
States by request type and report the total number of requests received by request type. 


A search warrant is a judicial document used in a criminal case authorizing law enforcement 
officers to search a person or place to obtain evidence. The Fourth Amendment requires that law 
enforcement officers obtain search warrants by submitting affidavits and other evidence to a judge 
or magistrate to meet a burden of proof that a search will yield evidence related to a crime. The 
judge or magistrate will issue the warrant if satisfied that the law enforcement officers have met 
the burden of proof. For customer content, Apple requires a search warrant issued upon a showing 
of probable cause in order to provide content. 


A wiretap order is a specific type of court order used in a criminal case that authorizes law 
enforcement officers to obtain contents of communications in real-time. A Title III wiretap order 
includes requirements that law enforcement officers make an application and furnish evidence to a 
judge or magistrate to demonstrate there is probable cause to believe that interception of 
communications will yield evidence related to a particular crime, there is probable cause to believe 
that an individual has committed or is about to commit a particular crime and must specifically 
identify the individual/target whose communications are to be intercepted. A statement must also 
be included as to whether other investigatory measures have been tried and failed or are unlikely to 
succeed. If satisfied that the requirements have been met, the judge or magistrate will issue the 
wiretap order. A wiretap order allows the government to obtain content on a forward-looking basis 
for a specific limited period of time as opposed to stored historical content. Apple can intercept 
users’ iCloud email communications upon receipt of a valid Wiretap Order. Apple cannot intercept 
users’ iMessage or FaceTime communications as these communications are end-to-end 
encrypted. 


A pen register or trap and trace order is a specific type of court order used in a criminal case 
authorizing law enforcement officers to obtain headers of electronic communications and other 
non-content data in real-time. A pen register order requires law enforcement officers to make a 
statement of the offense to which the pen register relates and certify the information likely to be 
obtained is relevant/material to an ongoing criminal investigation. The legal standard for obtaining 
a pen register order is lower than what is required for a search warrant or a wiretap order. A pen 
register order allows the government to obtain non-content data on a forward-looking basis for a 
specific limited period of time as opposed to stored historical information. A pen register order can 
be combined with a court order/warrant for historical records; in such instances, we report the 
process type as pen register/trap and trace order. 


A court order is a document issued by a judge or magistrate directing a person or entity to comply 
with the order. An order may be issued in either a criminal or civil case. Government agencies 
applying for an order in a criminal case must generally present facts and evidence to a judge or 
magistrate showing there are reasonable grounds to believe that the information sought is relevant 
and material to an ongoing criminal investigation or similar legal standard. Non-content data such 
as subscriber and transaction information can be provided in response to a court order. 


A subpoena or equivalent legal process request (e.g. petition or summons) is a document issued 
by a government agency or court directing a person or entity to comply with requests for 
information. Local, state and federal government agencies may issue subpoenas. Under many 
jurisdictions, a judge or magistrate is not required to review a subpoena before it is issued. 
Accordingly, the subpoena has the lowest threshold for burden of proof. A subpoena may be 
issued in either a criminal or civil case. Non-content data such as device, subscriber and 
connection information can be provided in response to a subpoena. 


The percentage of requests by Legal Process Type. We calculate this based on the number of 
respective Legal Process Types compared to the respective total number of Device/Financial 
Identifier/Account Requests received by Apple. 
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Table 11: United States Private Party Requests for Information 
January 1 - June 30, 2020 


Table 11 provides information regarding United States private party (non-government) requests for information. Examples of such 
requests are where private litigants are involved in either civil or criminal proceedings. Apple complies with these requests insofar 
as we are legally required to do so. 


# of Private Party Requests # of Requests Rejected/ # of Requests Where No # of Requests Where Data 
Challenged & No Data Provided Data Provided Provided 

221 47 126 48 

% of Total (100%) 21% 57% 22% 


# of Private Party The number of requests received from private parties (non-government) in the United States seeking 
Requests customer data related to specific devices, financial identifiers and/or accounts. We count each 
individual request received from private parties and report the total number of requests received. 


# of Requests The number of private party requests that resulted in Apple challenging or rejecting the request based 
Rejected/ on grounds such as a request does not have a valid legal basis, or is unclear and/or over-broad; and 
Challenged & where no data was provided. We count each private party request where we challenge or reject it in 
No Data Provided full, and report the total number of such instances. 


# of Requests The number of private party requests that resulted in Apple providing no data. For example, where 
Where No Data there was no responsive data. We count each instance where we do not provide data in response to a 
Provided private party request and report the total number of such instances. 


# of Requests The number of private party requests that resulted in Apple providing data in response to valid legal 
Where Data process or subscriber consent. We count each instance where we provide data in response to a 
Provided private party request and report the total number of such instances. 


% of Total The percentages are calculated based on the number of the respective response types compared to 
the total number of private party requests received by Apple. 
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Table 12: United States Private Party Requests for Account Restriction/Deletion 
January 1 - June 30, 2020 


Table 12 provides information regarding United States private party (non-government) requests for Apple account restriction/ 
deletion. Examples of such requests are where private litigants are involved in either civil or criminal proceedings, and requests for 
Apple to restrict/delete an account may arise. For requests seeking to restrict/delete a customer's Apple ID, Apple requires a court 
order. Apple complies with these requests insofar as we are legally required to do so. 


# of Account Restriction/ 
Account Deletion Requests 
Received 


# of Account 
Restriction/Account 
Deletion Requests 
Received 


# of Accounts 
Specified in the 
Requests 


# of Requests 
Rejected/Challenged 
Where No Action 
Taken 


# of Account 
Restriction Requests 
Where Account 
Restricted 


# of Account 
Deletion Requests 
Where Account 
Deleted 


#of Accounts #of Requests Rejected/ # of Account Restriction # of Account Deletion 
Specified in Challenged Where No Requests Where Requests Where 
the Requests Action Taken Account Restricted Account Deleted 


3 0) 1 0) 


The number of requests received from private parties (non-government), such as participants in 
a civil or family law case, seeking to restrict or delete a customer's Apple ID. We count each 
individual request received from private parties and report the total number of requests received. 


The number of accounts specified in the requests. One request may contain one or multiple 
account identifiers. For example, in a case related to multiple shared accounts, a private party 
may request Apple to restrict or delete several accounts in a single request. We count the 
number of accounts identified in each request received from private parties and report the total 
number of accounts specified in requests received. 


The number of account restriction/deletion requests that resulted in Apple challenging or 
rejecting the request based on grounds such as a request does not have a valid legal basis, or is 
unclear, inappropriate, and/or over-broad, or where it is not accompanied by a court order 
demonstrating the grounds upon which the account is to be restricted/deleted; and where no 
action was taken by Apple. We count each account restriction/deletion request where we 
challenge or reject it and report the total number of such instances. 


The number of account restriction requests where Apple determined the request and order 
sufficiently demonstrated the grounds upon which the specified account was to be restricted; 
and we proceeded with the requested restriction. We count each account restriction request 
where we proceeded with restriction and report the total number of such instances. 


The number of account deletion requests where Apple determined the request and order 
sufficiently demonstrated the grounds upon which the specified account was to be deleted; and 
we deleted the Apple account. We count each account deletion request where we deleted an 
account and report the total number of such instances. 
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Table 13: Worldwide Government App Store Takedown Requests - Legal Violations 
January 1 - June 30, 2020 


Table 13 provides information regarding requests from government authorities to remove apps from the App Store based on 
alleged/suspected violations of local law. Examples of such requests are where law enforcement or regulatory agencies suspect 
an app may be unlawful or relate to/contain unlawful content. Apple complies with these requests insofar as we are legally 
required to do so. 


(App removals were limited to requesting country/region App Store storefront, except if indicated otherwise in the footnotes) 


Country or # of Legal # of Apps # of Requests # of Requests # of Apps # of Appeals # of Appeals # of Apps 
Region’ Violation Specified in Objected to in Where App Removed Received Granted Reinstated 
Takedown the Requests Part or Removed 
Requests Rejected in Full 
Received 


China mainland2 46 152 fe) 46 152 (e) (0) (e) 
Sri Lanka? 1 1 0 1 1 0 ie) e) 
Taiwan* 1 1 (e) 1 1 1 


Germany® 
India® 


Norway* 


Russia” 


ooo7ec;9o 


Switzerland4 


1Only countries / regions where Apple received legal violation removal requests during report period January 1 - June 30, 2020, are listed. 

2 Requests predominantly related to apps with pornography or other illegal content. 

3 Request related to app with illegal content. 

4 Request related to gaming or gambling app(s) not complying with regulations. 

5 Request related to app failing to meet medical device law requirements. App removed from the 27 EU member states and the United Kingdom. 
6 Requests predominantly related to apps identified as state security violations. 

7 Requests related to apps operating without government license, predominantly gambling apps. 
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# of Legal Violation 
Takedown Requests 
Received 


# of Apps Specified 
in the Requests 


# of Requests 
Objected to in Part or 
Rejected in Full 


# of Requests Where 
App Removed 


# of Apps Removed 


# of Appeals 
Received 


# of Appeals Granted 


# of Apps Reinstated 


The number of requests received from a government agency seeking to take down a third party 
application offered on the App Store related to alleged/suspected legal violations. We count 
each individual request received from each country or region and report the total number of 
requests received by country or region. 


The number of apps specified in the requests verified to be apps available on the App Store. A 
government agency request may contain one or multiple apps. We count the number of apps 
identified in each request received from each country or region and report the total number of 
apps specified in requests received by country or region. 


The number of app takedown requests related to alleged/suspected legal violations that resulted 
in Apple objecting to or rejecting the request in part or in full based on grounds such as a request 
does not have a valid legal basis, or is unclear, inappropriate and/or over-broad, or does not 
sufficiently demonstrate the legal violation of the app to be removed. We count each App Store 
takedown request related to alleged/suspected legal violations where we object in part or reject 
in full and report the total number of such instances by country or region. 


The number of App Store takedown requests where the request sufficiently demonstrated a valid 
legal violation and Apple proceeded with removal of app(s) from the App Store. We count each 
app takedown request related to alleged/suspected legal violations where we proceeded with 
app removal and report the total number of such instances by country or region. 


The number of App Store takedown requests where the request sufficiently demonstrated a valid 
legal violation and Apple proceeded with removal of app(s) from the App Store. We count each 
app takedown request related to alleged/suspected legal violations where we proceeded with 
app removal and report the total number of apps removed in such instances by country or region. 


The number of App Store takedown requests where Apple received notice of an appeal to court 
or government agency. We count each app takedown appeal related to alleged/suspected legal 
violations. 


The number of App Store takedown requests where Apple received notice of a court or 
government agency granting an appeal to the takedown request. We count each app takedown 
appeal granted that related to alleged/suspected legal violations. 


The number of apps reinstated to the App Store due to a court or government agency appeal 
being granted. We count each app reinstated from app removal related to alleged/suspected 
legal violations. 
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Table 14: Worldwide Government App Store Takedown Requests - Platform Policy Violations 
January 1 - June 30, 2020 


Table 14 provides information regarding requests from government authorities to remove apps from the App Store based on 
alleged/suspected violations of App Store platform policies. Examples of such requests are where law enforcement or regulatory 
agencies suspect an app may violate the App Store platform policies or relate to/contain content violating platform policies. Apple 
complies with these requests where Apple has determined there is an App Store platform policy violation. 


(App removals were worldwide) 


Country or # of Platform # of Apps # of Requests # of Requests # of Apps # of Appeals # of Appeals # of Apps 
Region’ Policy Violation Specified in Objected to in Where App Removed Received Granted Reinstated 
Takedown the Requests Part or Removed 
Requests Rejected in Full 
Received 


China mainland? 


Kuwait? 


1 Only countries / regions where Apple received platform violation removal requests during report period January 1 - June 30, 2020, are listed. 
2 Requests related to gambling apps and an app with pornographic content violating App Store Review Guidelines. 
3 Request related to an app violating App Store Review Guideline(s). 
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# of Platform Policy 
Violation Takedown 
Requests Received 


# of Apps Specified 
in the Requests 


# of Requests 
Objected to in Part or 
Rejected in Full 


# of Requests Where 
App Removed 


# of Apps Removed 


# of Appeals 
Received 


# of Appeals Granted 


# of Apps Reinstated 


The number of requests received from a government agency seeking to take down a third party 
application offered on the App Store related to alleged/suspected platform policy violations. We 
count each individual request received from each country or region and report the total number 
of requests received by country or region. 


The number of apps specified in the requests verified to be apps available on the App Store. A 
government agency request may contain one or multiple apps. We count the number of apps 
identified in each request received from each country or region and report the total number of 
apps specified in requests received by country or region. 


The number of app takedown requests related to alleged/suspected platform policy violations 
that resulted in Apple objecting to or rejecting the request in part or in full based on grounds 
such as a request does not have a valid legal basis, or is unclear, inappropriate and/or over- 
broad, or does not sufficiently demonstrate the platform policy violation of the app to be 
removed. We count each App Store takedown request related to alleged/suspected platform 
policy violations where we object in part or reject in full and report the total number of such 
instances by country or region. 


The number of App Store takedown requests where Apple determined the request sufficiently 
demonstrated a valid App Store platform policy violation and Apple proceeded with removal of 
app(s) from the App Store. We count each app takedown request related to alleged/suspected 
platform policy violations where we proceeded with app removal and report the total number of 
such instances by country or region. 


The number of App Store takedown requests where Apple determined the request sufficiently 
demonstrated a valid App Store platform policy violation and Apple proceeded with removal of 
app(s) from the App Store. We count each app takedown request related to alleged/suspected 
platform policy violations where we proceeded with app removal and report the total number of 
apps removed in such instances by country or region. 


The number of App Store takedown requests where Apple received notice of an appeal to court 
or government agency. We count each app takedown appeal related to alleged/suspected 
platform policy violations. 


The number of App Store takedown requests where Apple received notice of a court or 
government agency granting an appeal to the takedown request. We count each app takedown 
appeal granted that related to alleged/suspected platform policy violations. 


The number of apps reinstated to the App Store due to a court or government agency appeal 
being granted. We count each app reinstated from app removal related to alleged/suspected 
platform policy violations. 
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Matters of note in this 
report: 


Government requests 
related to customer 
data / accounts 


Table 1 Worldwide Government Device Requests 
China mainland - High number of devices specified in requests predominantly due to tax 
and customs investigations. 


Denmark - High number of devices specified in requests predominantly due to a cargo 
theft investigation. 


Germany - High volume of device requests predominantly due to stolen device 
investigations. 


Hungary - High number of devices specified in requests predominantly due to a tax 
fraud investigation from Tax and Customs Authorities. 


South Africa - High number of devices specified in requests predominantly due to stolen 
device investigations. 


South Korea - High number of devices specified in requests predominantly due to stolen 
device investigations. 


Sweden - High number of devices specified in requests predominantly due to a cargo 
theft investigation. 


United States - High number of devices specified in requests predominantly due to 
return and repair fraud investigations. 


Table 2 Worldwide Government Financial Identifier Requests 

China mainland - High number of financial identifiers specified in requests 
predominantly due to an investigation of unauthorized access to App Store & iTunes Gift 
Cards. 


Germany - High volume of financial identifier requests predominantly due to App Store & 
iTunes Gift Card and credit card fraud investigations. 


Luxembourg - High number of financial identifiers specified in requests predominantly 
due to App Store & iTunes Gift Cards related to a financial fraud investigation. 


Spain - High volume of financial identifier requests predominantly due to App Store & 
iTunes Gift Card and credit card fraud investigations. 


United Kingdom - High number of financial identifiers specified in requests 
predominantly due to a tax fraud investigation. 


United States - High number of financial identifiers specified in requests predominantly 
due to a trade-in fraud investigation. 


Table 3 Worldwide Government Account Requests 
Brazil - High volume of account requests predominantly due to court orders where 
investigation type was not indicated and non-violent crime or drug investigations. 


United States - High volume of account requests with no predominant investigation type. 


Mutual Legal Assistance Treaty (MLAT) Requests 

Requests received from a foreign government pursuant to the MLAT process or through 
other cooperative efforts with the United States government are included in Apple's 
transparency report. Apple has been able to determine 6 MLAT requests for information 
were issued by the United States government in this reporting period. However, this may 
not be the precise number of MLAT requests received, as in some instances a United 
States court order or search warrant may not indicate that it is the result of an MLAT 
request. In instances where the originating country was identified, we count and report 
the MLAT request under the country of origin. In instances where the originating country 
was not identified, we count and report the request under the United States of America. 
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Matters of note in this 
report: 


Government requests 
related to 
app removals 


Table 13 Worldwide Government App Store Takedown Requests - Legal Violations 
China mainland - Requests predominantly related to apps with pornography or other 
illegal content. 


Germany - Request related to app failing to meet medical device law requirements. App 
removed from the 27 EU member states and the United Kingdom. 


India - Requests predominantly related to apps identified as state security violations. 
Norway - Request related to gambling apps not complying with regulations. 


Russia - Requests related to apps operating without government license, predominantly 
gambling apps. 


Sri Lanka - Request related to app with illegal content. 
Switzerland - Request related to illegal gambling apps. 
Taiwan - Request related to gaming app not complying with regulations. Developer 


resolved issue and submitted appeal to agency. Agency provided approval for app to be 
restored. 


Table 14 Worldwide Government App Store Takedown Requests - Platform Policy 
Violations 

China mainland - Requests related to gambling apps and app with pornographic content 
violating App Store Review Guidelines. 


Kuwait - Request related to app violating App Store Review Guideline(s). 
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